Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
File: LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft (raw, json)
Hash identifier: p5LrOzc4+j2PDmYmokxSM6fZgUTBMG9lk+gQw21oVOA=
Subject key identifier: 7C:FE:1D:F0:D3:4C:17:AD:F1:88:8C:01:B8:DE:AD:42:5B:6C:2F:20
Authority key identifier: 2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
Certificate issuer: /CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Certificate serial: 01A17DAA3F42EE0BB82369924CC50C69545F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
Manifest number: 05C2
Signing time: Tue 27 Oct 2026 14:01:11 +0000
Manifest this update: Tue 27 Oct 2026 14:01:11 +0000
Manifest next update: Wed 28 Oct 2026 14:01:11 +0000
Files and hashes: 1: LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl (hash: PmZ116rAG21AuHaAyeHAMC9d3PsWX4EcpogzFCiYX+w=)
2: M1lzEwcwplQSzJYIKHVS3CPULtM.roa (hash: CbzM5ppQIFt899x5QRVS7mcpi5adykj4B/FuVFp7z1c=)
3: XoEkPtTXjeb_-7xj-jmj9LR0DZ0.roa (hash: nDfriDConckMs48sY8E3bTYeB/Xt3SqWx+9aKAnIj6c=)
4: gpcRZMvvAarNXGnEQk69CRu1kTw.roa (hash: vDgS5AGwOlvvwcg7ps4GbXeY48BReojyPRTXSF9XHHw=)
5: msgnxgZNTBjCcSqU_QPJtqUOmMU.roa (hash: OJgEcPABUr58K6pT9Z2gh2asglbScIg+k5q0lkWov3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:3f:42:ee:0b:b8:23:69:92:4c:c5:0c:69:54:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Validity
Not Before: Oct 27 14:01:11 2026 GMT
Not After : Oct 28 14:01:11 2026 GMT
Subject: CN=7cfe1df0d34c17adf1888c01b8dead425b6c2f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3d:5e:7f:5a:b6:f4:23:26:36:25:36:28:11:
dd:b5:16:64:c8:92:ec:ad:be:62:64:7f:67:af:ed:
46:1c:28:b0:81:0a:f5:dd:16:64:ba:06:e5:92:60:
37:fe:07:f8:5f:46:f2:5a:e6:46:9c:b5:8e:42:55:
d0:06:cc:cf:4b:43:98:05:db:8d:99:87:1c:f6:40:
96:56:f0:f8:34:6a:12:5f:f7:8a:73:02:be:db:95:
31:0b:d9:e0:83:8a:23:bd:4d:14:da:18:22:88:dc:
68:ac:25:1f:ea:3a:89:ee:e4:63:5f:a4:dc:22:b5:
87:db:36:74:80:e3:d9:97:76:ea:8b:43:23:7d:ac:
92:b6:bf:5c:ab:66:25:1d:6d:88:b9:e4:d1:b7:9d:
1d:c7:79:fb:9e:7f:1b:e2:e2:42:33:35:3c:c2:be:
cd:b3:34:35:f3:fe:99:bc:f7:57:32:bb:75:44:06:
24:80:19:e5:7f:77:03:28:c7:29:a8:14:50:99:55:
89:24:8d:76:48:0f:b9:b1:b8:b6:9d:dd:7b:d7:02:
c5:6a:0a:ee:43:ef:c5:81:7b:c7:52:b2:bd:4f:fe:
e5:11:71:fe:ec:ac:ac:ac:af:97:30:5c:f1:d8:be:
66:79:fd:1e:be:1e:05:5e:62:06:f5:54:38:32:2b:
4e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FE:1D:F0:D3:4C:17:AD:F1:88:8C:01:B8:DE:AD:42:5B:6C:2F:20
X509v3 Authority Key Identifier:
keyid:2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:d1:68:b2:25:bd:77:59:da:e0:6b:96:01:57:e8:05:de:3e:
dc:b7:7b:bf:cc:9f:97:c6:d7:86:41:b8:ea:72:4d:ee:87:a3:
1c:63:ec:3a:e0:c2:dc:b9:e2:40:8a:40:bb:cd:b8:8a:66:13:
4e:2e:c6:00:ad:d8:a3:be:cc:82:13:69:a0:20:cb:22:ad:d0:
10:ae:67:3b:9b:56:8e:83:2d:d2:d0:09:dd:6d:15:b6:0e:01:
4b:99:9b:43:d0:97:d5:88:4e:16:52:9c:cf:77:86:96:05:32:
86:df:5c:43:2f:d0:67:4b:99:07:cf:c3:64:f1:e4:0d:da:56:
d5:d5:95:d8:d6:81:be:b4:e6:b6:3d:6f:1f:b4:2f:08:7f:a9:
c5:af:22:18:c2:a0:1d:72:e1:4f:11:e1:da:85:e9:bd:90:a7:
b1:88:21:c3:e3:4d:91:a4:aa:f0:47:96:5c:e2:eb:16:e8:4b:
02:9b:ca:aa:98:29:71:d8:1c:4a:65:9f:38:15:da:b0:56:6d:
2f:a8:f0:9f:07:18:eb:58:67:6e:4a:9c:a5:51:01:62:83:5a:
e0:d6:ef:8b:b5:72:01:24:e2:20:b7:87:da:52:c1:ff:2d:2d:
0d:5e:b3:58:d7:e7:03:36:0f:25:66:2e:18:8b:d9:08:47:15:
59:57:f6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:32:59 2026 by rpki-client